Commit Graph
100 Commits
Author SHA1 Message Date
marcopan b5db0cd3c1 docs: define modular workflow domain semantics
Deployment release gate / Linux Docker deployment and rollback (push) Canceled after 0s
Deployment release gate / Windows clone and Compose contract (push) Canceled after 0s
Deployment release gate / LF, Compose, docs, and TypeScript (push) Canceled after 0s
Deployment release gate / Hermetic authentication browser gate (push) Canceled after 0s
Deployment release gate / DWH authentication Nginx gate (push) Canceled after 0s
Deployment release gate / Native Windows Docker Desktop/WSL2 startup (push) Canceled after 0s
2026-08-23 14:03:20 +02:00
marcopan 5f0575464b docs: add PSD Sol orchestration prompt 2026-08-20 14:49:32 +02:00
marcopan 21caaa22e3 docs: plan PSD server deployment program 2026-08-20 00:57:47 +02:00
marcopan 3fd177b6c4 docs: design PSD server deployment program 2026-08-20 00:44:52 +02:00
marcopan 5c0dc8c9f2 chore: clean local tooling and deployment artifacts 2026-08-19 19:41:16 +02:00
marcopan 89fc48dbe0 merge: integrate thoth authentication 2026-08-19 17:56:03 +02:00
marcopan 125feee778 feat(auth): clarify login page messaging 2026-08-19 17:43:22 +02:00
marcopan 1184b6db16 docs: converge operator guidance on tht 2026-08-19 16:12:11 +02:00
marcopan 32a17d83a9 docs(auth): add acceptance and PSD deployment plan 2026-08-19 14:29:53 +02:00
marcopan 361d55a9c2 docs(auth): record fix round 2 certification 2026-08-18 16:29:09 +02:00
marcopan 2a93590712 test(auth): bound restore lifecycle gates 2026-08-18 16:15:20 +02:00
marcopan 0f762ad6b6 docs(auth): record final review fix round 1 evidence 2026-08-18 15:26:23 +02:00
marcopan 10cd66fe6a fix(windows): lock claim validation boundary 2026-08-18 15:15:51 +02:00
marcopan b48e9e9189 fix(windows): serialize claim operations 2026-08-18 15:05:04 +02:00
marcopan b261dd4d3a fix(windows): serialize private root contention 2026-08-18 14:49:56 +02:00
marcopan feee4ee648 refactor(windows): unify private claim primitives 2026-08-18 14:45:24 +02:00
marcopan 9fc1a15069 fix(windows): observe settled claim loss 2026-08-18 14:39:51 +02:00
marcopan b652011bfc test(windows): close staged writer before reopen 2026-08-18 14:35:07 +02:00
marcopan c01482c52d fix(windows): finish contested auth cleanup 2026-08-18 14:35:07 +02:00
marcopan 6474118ec3 fix(restore): share retained staging capability 2026-08-18 14:30:33 +02:00
marcopan 2d1670e390 fix(windows): complete concurrent auth consumption 2026-08-18 14:30:33 +02:00
marcopan 455fffb299 fix(windows): tolerate concurrent auth claims 2026-08-18 14:21:11 +02:00
marcopan 824245d285 fix(windows): avoid mutating lifecycle ACL trees 2026-08-18 14:21:06 +02:00
marcopan afb0e21200 fix(windows): protect existing lifecycle child first 2026-08-18 14:11:41 +02:00
marcopan ada3f9fc7f fix(windows): protect lifecycle and backup state 2026-08-18 14:05:52 +02:00
marcopan b6396e66fa test(backup): protect Windows installation descriptor 2026-08-18 13:45:07 +02:00
marcopan fa197498f2 test(windows): order private fixture protection 2026-08-18 13:42:14 +02:00
marcopan aee5863112 test(windows): respect retained no-delete handles 2026-08-18 13:38:25 +02:00
marcopan b40f8e885a test(safeio): expose private reopen failure 2026-08-18 13:31:10 +02:00
marcopan 835b298212 fix(safeio): retain attribute inspection on private create 2026-08-18 13:26:34 +02:00
marcopan 93f9939be5 test(safeio): cover write-only private create validation 2026-08-18 13:25:34 +02:00
marcopan def45d1628 test(safeio): isolate private create failure 2026-08-18 13:19:58 +02:00
marcopan c863244a86 fix(safeio): use self-relative create descriptors 2026-08-18 13:16:28 +02:00
marcopan 81077e59d3 fix(safeio): normalize NT relative access masks 2026-08-18 13:11:40 +02:00
marcopan 36592634bb test(safeio): diagnose relative Windows opens 2026-08-18 13:07:58 +02:00
marcopan 4f07b26f5e fix(safeio): pass valid NT file attributes 2026-08-18 13:03:20 +02:00
marcopan 747b4200d9 test(safeio): expose native Windows DACL shape 2026-08-18 13:00:23 +02:00
marcopan a0e05ad392 fix(safeio): accept Windows effective full-control ACL 2026-08-18 12:52:37 +02:00
marcopan cd5f505c8a fix(auth): close Windows remediation review findings 2026-08-18 12:46:54 +02:00
marcopan fa499a9bdd docs(auth): record Task 4 certification evidence 2026-08-18 11:58:38 +02:00
marcopan b31b27e584 fix(auth): allow Windows claim verification to share delete 2026-08-18 11:18:57 +02:00
marcopan 0d8e707533 fix(auth): remove Windows claims by retained handle 2026-08-18 11:04:21 +02:00
marcopan 5f9a3ae066 fix(backup): retain staging cleanup capability 2026-08-18 10:50:56 +02:00
marcopan d43738eeae fix(auth): require local registry ownership 2026-08-18 10:31:44 +02:00
marcopan 3c6ddfaef1 docs(auth): plan important finding remediation 2026-08-18 10:10:37 +02:00
marcopanandCommandCodeBot 1d045a44a6 docs: add canonical Evidence structure design
Co-authored-by: CommandCodeBot <noreply@commandcode.ai>
2026-08-18 09:52:53 +02:00
marcopan 178113a7e8 docs(auth): record final branch review 2026-08-18 09:41:09 +02:00
marcopan 39b5453287 docs(auth): record unresolved Task 15 review 2026-08-18 09:27:11 +02:00
marcopan d7cd8fdf94 docs(task15): record retained-handle fix evidence 2026-08-18 09:15:14 +02:00
marcopan 74b062f1a7 fix(safeio): retain writable Windows parent handles 2026-08-18 09:05:42 +02:00
marcopan e7a7f4f066 fix(safeio): retain private file parent handles 2026-08-18 08:51:59 +02:00
marcopan 0b77d1e850 docs(auth): retain Task 15 round four evidence 2026-08-18 08:24:08 +02:00
marcopan 54698e7340 fix(backup): privately stage restore archive 2026-08-18 08:13:13 +02:00
marcopan df00f6bfa8 docs(state): correct Task 15 source provenance 2026-08-18 07:51:27 +02:00
marcopan cb1bd101f0 docs(state): retain Task 15 final gate evidence 2026-08-18 07:49:40 +02:00
marcopan e20bf33e2a fix(backup): use platform private staging controls 2026-08-18 07:39:51 +02:00
marcopan 4d230b87af fix(deploy): render maintenance smoke profile 2026-08-18 07:24:18 +02:00
marcopan fe190e7046 fix(auth): close Task 15 review round two 2026-08-18 07:21:24 +02:00
marcopan 225ffc8e20 docs(state): record Task 15 round-one evidence 2026-08-18 06:43:10 +02:00
marcopan b2772f10a5 test(deploy): retain failed smoke image evidence 2026-08-18 06:37:35 +02:00
marcopan 2b618c5a0f test(auth): harden Task 15 OIDC smoke evidence 2026-08-18 06:33:48 +02:00
marcopan 8a3fa5031d test(auth): gate local and OIDC authentication release 2026-08-18 06:02:25 +02:00
marcopan 7cf7d9db6b docs(auth): correct Task 14 release status 2026-08-18 03:46:52 +02:00
marcopan 91925d64bf docs(auth): address authentication guide review 2026-08-18 03:33:00 +02:00
marcopan f4f38717e1 docs(auth): document local OIDC and Authentik operation 2026-08-18 03:07:33 +02:00
marcopan 6ec5b76c54 fix(auth): serialize restore checkpoint lifecycle 2026-08-18 02:43:42 +02:00
marcopan 39a0fdbd00 fix(auth): harden backup restore lifecycle cleanup 2026-08-18 02:01:42 +02:00
marcopan dee17893b4 fix(auth): harden restore verification transaction 2026-08-18 00:58:12 +02:00
marcopan 0651f3316f fix(auth): validate stopped workspace restore 2026-08-18 00:06:28 +02:00
marcopan e8b9995ed0 feat(auth): integrate authentication with installation lifecycle 2026-08-17 23:33:51 +02:00
marcopan 0d0c15b4b8 fix(auth): complete Task 13 deployment review 2026-08-17 22:15:41 +02:00
marcopan 7e52df2702 fix(auth): address Task 13 deployment review findings 2026-08-17 21:31:25 +02:00
marcopan 9558eaa508 feat(auth): integrate authentication with installation lifecycle 2026-08-17 20:21:42 +02:00
marcopan 0a2c667231 fix(auth): close cancellation and workspace races 2026-08-17 19:32:03 +02:00
marcopan d12b629420 fix(auth): harden diagnostic cleanup races 2026-08-17 18:41:40 +02:00
marcopan af16464e68 fix(auth): harden interactive diagnostic lifecycle 2026-08-17 17:57:10 +02:00
marcopan ef244ab56d fix(auth): harden unified diagnostic execution 2026-08-17 17:25:26 +02:00
marcopan 30ee9433dc fix(auth): harden unified diagnostic execution 2026-08-17 16:39:54 +02:00
marcopan 3ed00ff086 feat(auth): include authentication in workspace and tht diagnostics 2026-08-17 15:51:16 +02:00
marcopan cb0e873ed7 fix(auth): pin native auth storage operations 2026-08-17 14:52:21 +02:00
marcopan 6d438f4c7e fix(auth): close diagnostic filesystem races 2026-08-17 13:04:15 +02:00
marcopan be1724890a fix(auth): make diagnostics bounded and portable 2026-08-17 12:19:19 +02:00
marcopan 7cfbee36fa fix(auth): make diagnostics match runtime safety 2026-08-17 11:23:52 +02:00
marcopan f0ae680671 feat(auth): validate mapped groups through Authentik 2026-08-17 10:44:56 +02:00
marcopan 33ae7cfdc2 fix(auth): bound all OIDC provider exchanges 2026-08-17 10:03:07 +02:00
marcopan c86f01e886 fix(auth): paginate session maintenance safely 2026-08-17 09:05:20 +02:00
marcopan 3e7bb11313 fix(auth): isolate bounded OIDC cleanup 2026-08-17 07:46:43 +02:00
marcopan bdabecbb63 fix(auth): bound OIDC initiation and transport 2026-08-17 07:03:19 +02:00
marcopan 8573500121 fix(auth): harden OIDC browser transactions 2026-08-17 06:18:49 +02:00
marcopan 4fe51cbeb1 feat(auth): add generic OIDC login with mandatory groups 2026-08-17 05:44:10 +02:00
marcopan 202822f3ba feat(auth): add remembered local login to the frontend 2026-08-17 04:52:39 +02:00
marcopan 8c67cb75dc fix(auth): honor HTTPS sessions in Pi management 2026-08-17 01:46:34 +02:00
marcopan 09e546c1ef fix(auth): bind request auth snapshots 2026-08-17 01:11:25 +02:00
marcopan 94c2cd3709 fix(auth): bind current local registry and CORS 2026-08-17 00:34:58 +02:00
marcopan c34e01e9b9 fix(auth): harden async login boundaries 2026-08-17 00:00:34 +02:00
marcopan 29bfb41363 feat(auth): add local login and CSRF-protected sessions 2026-08-16 23:23:55 +02:00
marcopan 8477a69a29 fix(auth): tighten bridge claim protocol 2026-08-16 22:44:44 +02:00
marcopan 7d9ca13f1d fix(auth): harden Windows storage bridge 2026-08-16 22:16:13 +02:00
marcopan c9b02fc57e fix(auth): add Windows session storage bridge 2026-08-16 21:43:03 +02:00
marcopan 6bf8218fea fix(auth): harden persistent sessions 2026-08-16 21:03:07 +02:00